PT-2023-19049 · Gallagher · Gallagher Command Centre

Published 2023-12-18 · Updated 2024-01-05 · CVE-2023-23570

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre versions 8.80 and prior Gallagher Command Centre versions 8.90 prior to vEL8.90.1620 (MR2)

Description The Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed, leading to invalid configuration with undefined behavior.

Recommendations For Gallagher Command Centre versions 8.80 and prior, update to version 8.90 or later and then apply the update to vEL8.90.1620 (MR2) or later. For Gallagher Command Centre versions 8.90 prior to vEL8.90.1620 (MR2), update to vEL8.90.1620 (MR2) or later.

Fix

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2023-23570

Affected Products

Gallagher Command Centre

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-23570 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23570 · Vendor Advisory
• https://security.gallagher.com/Security-Advisories/CVE-2023-23570 · Vendor Advisory
• https://t.me/cvenotify/64127 · Telegram Post
• https://twitter.com/CVEnew/status/1736872685039411337 · Twitter Post
• https://t.me/cvenotify/64031 · Telegram Post
• https://t.me/cvenotify/66452 · Telegram Post